Privacy Policy

Last updated 20 August 2026

Numou is a point-of-sale and inventory app for small shops, cafés and market stalls. This policy explains what the app collects, why, who it is shared with, and how to get it deleted. It covers the Numou mobile app and numou.tech.

Numou is operated by ELANTCH LTD, a company registered in England and Wales, whose registered office is at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. ELANTCH LTD is the data controller for the account data described below. For any question about this policy, or to exercise any of the rights described below, write to contact@numou.tech.

The short version. We collect what the app needs to run your till: your account details, the business records you enter, and crash diagnostics. We do not sell your data, we do not show ads, and there is no advertising or marketing tracking in the app. You can delete your account from inside the app or from numou.tech/delete-account.

1. Who is responsible for what

Numou holds two different kinds of data, and the responsibility for them is split:

Your account. Your name, email and sign-in details are ours to look after. We decide how they are handled, and this policy governs them.
Your shop's records. Products, sales, stock, staff and customer contacts belong to the business using Numou. The shop decides what to record and for how long; we store and process it on the shop's instructions. If you are a customer of a shop that uses Numou and you want your details removed from its records, ask that shop — they control it. We will help them act on your request.

2. What the app collects

What	Specifically	Why
Account details	Name, email address, password (stored only as a bcrypt hash), or your Google account identifier if you sign in with Google. Role, account creation date and last sign-in time.	To create your account, sign you in and apply the right permissions.
Till PINs	The short PIN staff use on a shared device, stored only as a bcrypt hash.	So staff can switch on a shared till without typing a password.
Device records	Devices linked to your shop, their enrolment status, and a Firebase Cloud Messaging token per device.	To keep tills in sync and to send operational notifications.
Business records you enter	Products, categories, units, suppliers, stock levels and stock movements, orders and order lines, payments, tax rates, staff records, and client records (contact name, company, phone, address).	These are the app's purpose — they are your shop's own books.
Crash diagnostics	Via Firebase Crashlytics: crash reports and stack traces, device model, operating system version, app version, and a Crashlytics installation identifier.	To find and fix crashes. You can turn this off at any time under Settings → Privacy → Send crash reports; nothing is collected while it is off.
Server logs	IP address, request path, timestamp and browser/app user agent.	To keep the service running and to block abuse. Retained for a short period, then rotated out.

The app does not collect your precise location, your contacts, your photos beyond the images you deliberately attach to a product, or your microphone audio. The camera is used only to scan barcodes and to take product photos, and only while you have that screen open.

Data kept on your device

So that you can keep selling when the connection drops, Numou caches your product catalogue and queues unsent orders on the device itself. This copy lives in the app's private storage and is cleared when you sign out or uninstall the app.

3. What we never do

We do not sell or rent your data to anyone.
We do not show advertising in the app, and there is no advertising SDK in it.
We do not use your shop's sales data to build marketing profiles.
We do not run behavioural or marketing analytics in the app.

4. Who else sees the data

We share data only with the service providers Numou runs on, and only as far as each needs to do its job:

Google (Firebase Crashlytics and Firebase Cloud Messaging). Receives crash diagnostics and device messaging tokens. Google may process this outside the United Kingdom, including in the United States. Those transfers are covered by the standard contractual clauses in Google's data processing terms, together with the UK International Data Transfer Addendum — the safeguard UK GDPR requires for sending personal data abroad.
Sentry (error monitoring). Receives a report when something goes wrong on our servers: the error and where in the code it happened. Reports are stripped before they are sent — no request contents, no credentials, and email addresses are redacted. The only thing that identifies you is your account's internal id, never your name or address. Our Sentry project is hosted in the EU.
Our hosting provider. Stores the database and runs the server.

Beyond that, we disclose data only where the law requires it, or where it is necessary to investigate abuse of the service.

5. How it is protected

All traffic between the app and our servers runs over HTTPS/TLS.
Passwords and till PINs are stored as bcrypt hashes — they are never stored in a form we or anyone else can read back.
Access to a shop's data is restricted by role, and every request is checked against the signed-in user's membership of that shop.
Sign-in endpoints are rate limited to slow down guessing attacks.

No system is perfectly secure. If a breach ever affects your data, we will tell you and the relevant authority as required by law.

6. How long it is kept

Account data is kept while your account exists, and is deleted when you delete it.
Business records are kept while the shop uses Numou. Records you delete inside the app — a discontinued product, a former client — are marked as deleted and retained in the shop's history, so that past receipts and reports stay accurate. When a shop is closed its records are permanently deleted within 30 days. The delay is a grace period so a closure made by mistake can still be undone; after it, the data is gone rather than hidden.
Crash diagnostics follow Firebase Crashlytics' retention, which is 90 days.
Server logs are kept short-term for security and troubleshooting.

7. Your rights

You can ask us to:

give you a copy of the data we hold about you;
correct anything that is wrong;
delete your account and your personal data;
stop processing your data, or object to it.

Get a copy of your data yourself from Profile → Download my data in the app, which produces a JSON file covering your account, your shop memberships, your staff records and your registered devices. It leaves out your shop's own books, because those name other people — ask us if you need those as the business that owns them.

Delete your account yourself from Profile → Delete account in the app, or use the form at numou.tech/delete-account — you do not need the app installed to use it. For anything else, email contact@numou.tech and we will answer within 30 days.

If you are not satisfied with our answer, you may complain to a data protection authority. In the United Kingdom, where ELANTCH LTD is established, that is the Information Commissioner's Office (ico.org.uk). If you are in the EU or the EEA you may complain to your national authority, and if you are in Morocco you may contact the CNDP.

8. Children

Numou is a tool for running a business and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has created an account, write to us and we will remove it.

9. Changes to this policy

If this policy changes in a way that materially affects you, we will update the date at the top and notify you in the app before the change takes effect.

10. Contact

Questions, requests, or complaints: contact@numou.tech.